Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/1fdf04-8b4e-4332-a4de-7793b9efb1bd/1/rh6ygNFyKEakQSTExi0AWfYa8kI.mft
File: rh6ygNFyKEakQSTExi0AWfYa8kI.mft (raw, json)
Hash identifier: xXdT2XDFNcnl/HrUEp8qpISMFm18Gbp/HI4F34uBjMw=
Subject key identifier: 26:72:5C:03:8A:EB:CD:B1:92:2F:09:05:74:10:60:92:0D:FA:22:32
Authority key identifier: AE:1E:B2:80:D1:72:28:46:A4:41:24:C4:C6:2D:00:59:F6:1A:F2:42
Certificate issuer: /CN=ae1eb280d1722846a44124c4c62d0059f61af242
Certificate serial: 019655DD224F080DBF3FFDF2C128193B1BB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rh6ygNFyKEakQSTExi0AWfYa8kI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/1fdf04-8b4e-4332-a4de-7793b9efb1bd/1/rh6ygNFyKEakQSTExi0AWfYa8kI.mft
Manifest number: 1500
Signing time: Mon 21 Apr 2025 01:01:17 +0000
Manifest this update: Mon 21 Apr 2025 01:01:17 +0000
Manifest next update: Tue 22 Apr 2025 01:01:17 +0000
Files and hashes: 1: AkkqTkgoNjucTbIenc-XdoQnIZI.roa (hash: 22rbMnk8MBt5UQAAhQP9wIF7s9K2LwR7KpEuXLLCYQA=)
2: rh6ygNFyKEakQSTExi0AWfYa8kI.crl (hash: R3wSpG9w4mVy5ojVdMP+/Xj4hI9OaQ6iUg8hg6Kz/k4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/1fdf04-8b4e-4332-a4de-7793b9efb1bd/1/rh6ygNFyKEakQSTExi0AWfYa8kI.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/1fdf04-8b4e-4332-a4de-7793b9efb1bd/1/rh6ygNFyKEakQSTExi0AWfYa8kI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rh6ygNFyKEakQSTExi0AWfYa8kI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:dd:22:4f:08:0d:bf:3f:fd:f2:c1:28:19:3b:1b:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae1eb280d1722846a44124c4c62d0059f61af242
Validity
Not Before: Apr 21 01:01:17 2025 GMT
Not After : Apr 22 01:01:17 2025 GMT
Subject: CN=26725c038aebcdb1922f0905741060920dfa2232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:8e:54:23:6a:6a:70:1f:94:b5:21:1e:9d:62:
21:a1:d2:3a:66:6c:4b:9d:de:05:64:2d:ad:70:c7:
14:16:ac:9e:90:7e:dc:bc:1e:77:c6:65:07:5f:05:
e0:5a:2b:c0:f5:c7:a9:62:7d:e0:8d:00:7f:03:93:
89:64:13:70:a8:d8:4d:f8:a7:8a:ec:29:92:34:3f:
51:eb:cc:82:36:ae:dd:12:ed:a6:df:cf:5e:a0:e5:
b6:e3:0f:5b:2f:4a:b6:09:8b:04:81:a1:45:3a:f4:
96:9f:38:b7:74:18:0c:fa:76:98:87:2e:49:22:5b:
eb:ae:fd:92:bf:47:af:4a:51:e6:f4:87:2d:56:0d:
23:8d:a3:05:fe:c4:e5:2f:46:40:ba:4f:48:39:49:
56:3d:83:b9:1c:5f:5b:75:b2:f5:39:1e:58:01:f1:
c2:ee:2b:69:39:f6:ed:df:6a:cc:9b:b3:31:71:2a:
04:db:19:f6:6f:82:60:0b:ae:32:04:18:04:44:4d:
a3:2b:22:96:7c:ec:e9:0a:42:94:4c:5d:42:fd:7f:
d4:af:e0:0a:28:ae:84:a8:1b:33:cb:82:d5:6d:8d:
3e:98:54:00:db:d7:c2:5f:70:69:e1:41:ac:fc:05:
78:d8:21:da:39:b7:90:f7:42:42:ee:fb:5f:62:3c:
67:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:72:5C:03:8A:EB:CD:B1:92:2F:09:05:74:10:60:92:0D:FA:22:32
X509v3 Authority Key Identifier:
keyid:AE:1E:B2:80:D1:72:28:46:A4:41:24:C4:C6:2D:00:59:F6:1A:F2:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rh6ygNFyKEakQSTExi0AWfYa8kI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/1fdf04-8b4e-4332-a4de-7793b9efb1bd/1/rh6ygNFyKEakQSTExi0AWfYa8kI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/1fdf04-8b4e-4332-a4de-7793b9efb1bd/1/rh6ygNFyKEakQSTExi0AWfYa8kI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:d8:d0:f5:3c:95:22:a5:8f:07:5d:0d:f7:55:57:12:af:9f:
44:85:a8:93:49:85:04:08:30:17:de:3f:85:64:f6:77:40:5f:
8e:2a:36:9a:cc:a9:e3:55:af:73:55:68:8b:ff:61:3b:fa:5e:
cd:d8:02:ca:7f:c2:8c:20:e4:64:66:c0:c4:75:59:0e:bf:88:
d7:bd:e5:f2:83:6b:e9:2e:b1:97:27:fc:ae:05:87:fe:f9:dd:
ec:14:89:6c:82:69:2b:99:b4:63:1b:f3:07:1b:43:26:bf:95:
41:1f:b3:10:30:88:25:5a:dd:90:59:08:e7:c9:02:d3:d2:e6:
b6:ef:2f:0a:54:41:cc:29:01:af:82:69:9b:2c:26:c7:7b:92:
69:0d:2e:20:b4:bc:fc:19:9c:01:f4:fe:f7:76:e3:07:a3:1d:
e8:7a:95:71:83:96:d2:eb:b0:b4:0b:73:ad:da:ce:2f:64:92:
b6:97:3e:2e:59:1f:14:85:14:c8:c3:b2:3f:96:00:81:7a:3f:
f4:86:ea:c6:47:65:dc:7b:9d:2b:b6:ea:ac:bd:15:77:23:d0:
2e:f4:41:ff:3d:ce:6f:8f:ed:ad:56:b8:06:ed:42:9b:92:db:
8f:e0:bb:da:99:08:40:8d:76:eb:9d:22:9f:14:c0:4f:43:4b:
cd:d2:11:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZV3SJPCA2/P/3ywSgZOxu3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlMWViMjgwZDE3MjI4NDZhNDQxMjRjNGM2MmQwMDU5ZjYx
YWYyNDIwHhcNMjUwNDIxMDEwMTE3WhcNMjUwNDIyMDEwMTE3WjAzMTEwLwYDVQQD
EygyNjcyNWMwMzhhZWJjZGIxOTIyZjA5MDU3NDEwNjA5MjBkZmEyMjMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5I5UI2pqcB+UtSEenWIhodI6ZmxL
nd4FZC2tcMcUFqyekH7cvB53xmUHXwXgWivA9cepYn3gjQB/A5OJZBNwqNhN+KeK
7CmSND9R68yCNq7dEu2m389eoOW24w9bL0q2CYsEgaFFOvSWnzi3dBgM+naYhy5J
Ilvrrv2Sv0evSlHm9IctVg0jjaMF/sTlL0ZAuk9IOUlWPYO5HF9bdbL1OR5YAfHC
7itpOfbt32rMm7MxcSoE2xn2b4JgC64yBBgERE2jKyKWfOzpCkKUTF1C/X/Ur+AK
KK6EqBszy4LVbY0+mFQA29fCX3Bp4UGs/AV42CHaObeQ90JC7vtfYjxnowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCZyXAOK682xki8JBXQQYJIN+iIyMB8GA1UdIwQY
MBaAFK4esoDRcihGpEEkxMYtAFn2GvJCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmg2eWdORnlLRWFrUVNURXhpMEFXZllhOGtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC8xZmRmMDQtOGI0ZS00MzMyLWE0ZGUt
Nzc5M2I5ZWZiMWJkLzEvcmg2eWdORnlLRWFrUVNURXhpMEFXZllhOGtJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC8xZmRmMDQtOGI0ZS00MzMyLWE0ZGUtNzc5M2I5ZWZiMWJk
LzEvcmg2eWdORnlLRWFrUVNURXhpMEFXZllhOGtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAddjQ9TyV
IqWPB10N91VXEq+fRIWok0mFBAgwF94/hWT2d0Bfjio2msyp41Wvc1Voi/9hO/pe
zdgCyn/CjCDkZGbAxHVZDr+I173l8oNr6S6xlyf8rgWH/vnd7BSJbIJpK5m0Yxvz
BxtDJr+VQR+zEDCIJVrdkFkI58kC09Lmtu8vClRBzCkBr4Jpmywmx3uSaQ0uILS8
/BmcAfT+93bjB6Md6HqVcYOW0uuwtAtzrdrOL2SStpc+LlkfFIUUyMOyP5YAgXo/
9Ibqxkdl3HudK7bqrL0VdyPQLvRB/z3Ob4/trVa4Bu1Cm5Lbj+C72pkIQI12650i
nxTAT0NLzdIRdQ==
-----END CERTIFICATE-----
Generated at Mon Apr 21 04:11:06 2025 by rpki-client